Congress on Tuesday approved sweeping changes to surveillance laws enacted after 9/11, eliminating the National Security Agency's disputed bulk phone-records collection program and replacing it with a more restrictive measure to keep the records in phone companies' hands.